Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/46740199e47a6ce98c099f673bb3f9cd58e2ec7c.roa
File:                     46740199e47a6ce98c099f673bb3f9cd58e2ec7c.roa (raw, json)
Hash identifier:          35Kp01B8xos1BZOhFz7kILGiJVTfBlQTY3MTJzAVfVk=
Subject key identifier:   F0:16:3A:9C:F7:26:0D:F0:C3:C1:41:16:FB:06:92:80:7A:69:6E:F2
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       1F788F
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/46740199e47a6ce98c099f673bb3f9cd58e2ec7c.roa
Signing time:             Thu 23 Mar 2023 08:30:18 +0000
ROA not before:           Wed 22 Mar 2023 08:30:18 +0000
ROA not after:            Fri 21 Mar 2025 08:30:18 +0000
asID:                     18747
IP address blocks:        2802::/48 maxlen: 48
                          2802::/36 maxlen: 36
                          2802:0:47::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062479 (0x1f788f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 22 08:30:18 2023 GMT
            Not After : Mar 21 08:30:18 2025 GMT
        Subject: CN=46740199e47a6ce98c099f673bb3f9cd58e2ec7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:00:29:2d:ea:21:ec:3d:f8:b2:26:9d:e7:
                    dc:e9:87:02:92:f8:05:44:c9:9f:a0:3a:7a:9e:80:
                    45:3c:da:7b:af:8f:07:14:66:65:af:03:87:c7:db:
                    1f:e0:f9:7b:9e:45:0a:99:e6:3b:87:c7:21:d0:08:
                    c3:89:c4:d2:a5:49:4d:a2:a8:1c:a0:b2:6e:c3:6e:
                    fa:f5:a0:bb:c4:a5:ae:5f:c2:fd:1d:db:bb:b3:e5:
                    0d:46:ab:04:29:4d:18:87:a4:91:0e:42:ef:50:19:
                    64:e8:48:3e:69:7e:ad:69:54:32:85:67:3c:86:20:
                    3a:23:99:7a:80:6a:b8:71:98:08:d3:09:6b:a9:5a:
                    0c:3c:c7:66:97:17:38:5b:d9:94:90:a4:69:29:e3:
                    33:3d:53:a4:25:d7:14:b9:e0:3a:e0:66:28:75:f9:
                    35:5f:18:87:04:a5:3c:43:13:ea:05:55:1d:f2:29:
                    23:26:08:f5:5f:9b:09:74:a1:db:ce:d8:2a:4e:e4:
                    43:1f:1b:99:e4:aa:09:36:ae:be:7c:7a:03:29:6b:
                    11:d8:1f:ee:b9:f2:6c:93:34:11:b9:a6:e8:b0:0e:
                    18:79:97:96:56:57:39:d2:94:ce:55:61:e2:9e:4d:
                    fd:02:18:4f:1b:eb:87:c7:99:e8:45:16:4c:cf:19:
                    fa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:16:3A:9C:F7:26:0D:F0:C3:C1:41:16:FB:06:92:80:7A:69:6E:F2
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/46740199e47a6ce98c099f673bb3f9cd58e2ec7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2802::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:38:c1:8d:9a:85:8f:c2:c1:38:3a:6c:99:52:a6:8e:4b:
         de:82:3e:bc:96:a7:4e:46:17:9c:5e:a9:80:88:d7:5a:89:2b:
         bc:99:f4:6f:ee:4c:8b:52:47:fc:b8:80:c2:46:b8:51:9b:f4:
         35:90:6d:2c:ed:e0:e6:59:ce:d4:7a:ae:fe:4b:ce:5d:96:2f:
         7c:c2:6f:4d:4e:00:35:4d:9c:06:f1:81:89:81:96:0c:9d:7f:
         f0:3f:29:5e:2a:63:45:4d:58:6d:89:65:e7:56:d5:51:b8:58:
         5e:8f:88:03:ea:93:3b:6c:8e:21:14:2e:ad:f6:a0:f0:8e:5b:
         c2:30:22:6b:19:cd:f0:97:7d:0d:21:1a:1e:d0:98:9c:44:e8:
         09:e8:21:e3:8e:34:30:10:6e:47:bc:5c:35:aa:45:bc:cc:c2:
         be:fb:f2:c5:90:53:c8:ad:ec:01:e7:b3:40:92:f8:8a:dd:bc:
         b4:b1:4d:05:0c:1e:f8:22:95:6c:ad:f9:8f:d5:05:67:57:be:
         c0:1b:5e:5e:ce:84:fc:e3:a0:a4:9e:b8:14:c5:a4:0f:44:6d:
         67:01:ec:dc:ab:9a:9c:84:ff:a2:a9:2d:92:84:57:a8:6e:f6:
         57:83:e7:68:13:54:90:df:f6:18:a7:b6:d6:5f:15:ff:54:08:
         65:4f:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----